This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
File: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=
Subject key identifier: 88:09:F9:C3:34:B4:32:D1:C3:9B:1C:48:A8:1E:DC:2B:F5:17:92:77
Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Certificate serial: 3F3B7469AA55D1F6C7582569A25528946B448F6D
Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
Signing time: Wed 05 Nov 2025 06:02:26 +0000
ROA not before: Wed 05 Nov 2025 05:57:26 +0000
ROA not after: Wed 04 Nov 2026 06:02:26 +0000
asID: 135478
IP address blocks: 103.121.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 22:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3b:74:69:aa:55:d1:f6:c7:58:25:69:a2:55:28:94:6b:44:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12
Validity
Not Before: Nov 5 05:57:26 2025 GMT
Not After : Nov 4 06:02:26 2026 GMT
Subject: CN=8809F9C334B432D1C39B1C48A81EDC2BF5179277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:34:73:e0:62:41:1e:01:d6:ad:4b:4f:ab:
4d:0c:07:b4:65:20:15:c2:6f:23:87:99:eb:58:2b:
92:e5:38:4f:5b:3e:94:41:58:dd:dd:d5:1f:fa:08:
1a:01:06:1a:7f:0a:c0:3e:75:bb:54:2c:35:93:11:
ef:9c:9b:f4:7f:f0:d2:13:aa:1a:ed:bd:f4:68:13:
d6:50:12:c9:7a:69:80:79:d1:45:c8:df:d1:9c:10:
50:29:32:c3:3a:1b:20:ea:bf:19:a6:bc:c3:a5:ee:
8c:5e:83:86:5d:76:3f:a5:0f:d0:95:3c:58:14:3b:
9c:30:08:36:0d:99:34:d6:0d:55:0c:6b:aa:ba:78:
ac:dc:62:51:e3:2c:da:b8:c1:6f:9a:07:b7:15:94:
a1:13:02:dd:df:ff:6a:96:59:27:11:63:37:8e:83:
5f:bd:86:71:bb:d2:80:61:63:fd:bf:67:ae:fc:91:
e8:4c:cd:50:b2:1a:93:b8:0e:0a:eb:95:03:e8:ef:
d2:25:f3:e9:b1:46:2c:f1:20:4e:17:e2:35:ff:df:
6d:ef:50:fa:9e:35:a7:f7:8e:71:d2:33:ac:aa:c8:
49:d0:cc:e8:9b:ed:59:30:3b:36:da:97:0b:f4:80:
ad:dc:16:ab:f9:e6:1c:aa:be:74:e4:b9:62:23:98:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:F9:C3:34:B4:32:D1:C3:9B:1C:48:A8:1E:DC:2B:F5:17:92:77
X509v3 Authority Key Identifier:
keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.96.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:66:47:0b:9b:0f:23:47:1d:88:ee:fb:18:fb:c9:3f:bc:94:
a6:81:82:69:d2:ea:1f:25:e0:00:5d:7a:62:90:1e:ff:11:8d:
c0:cb:d9:44:cd:0b:a4:79:cf:b4:8e:e7:50:fa:51:dc:42:e1:
33:4f:0a:89:26:6c:9a:70:e2:6d:d7:e6:30:8d:de:2f:a9:89:
75:b9:96:f3:44:e9:b3:d8:cf:a3:d0:80:da:44:ed:22:be:9d:
b6:e0:17:1c:93:17:fc:6e:58:ac:7d:59:43:04:cb:65:f9:1d:
ee:79:ee:22:67:11:01:4e:10:1f:7e:2d:d0:4a:07:78:ed:95:
f5:fc:62:1e:60:2d:1b:5d:dc:9f:38:92:61:1d:23:0c:78:79:
61:12:8e:e4:b1:8a:b6:76:8f:5f:ac:33:bb:1f:9e:fc:64:12:
e6:d2:d6:fa:7a:3d:a4:53:78:cc:9b:52:9e:6d:ca:78:63:d2:
2f:f6:7d:9c:6c:20:a6:64:4c:9d:18:cc:7c:a7:ec:e8:3f:c6:
b7:4d:9f:02:22:fa:39:23:03:69:d3:04:25:5c:b8:02:e2:e4:
55:06:96:0d:f5:7e:49:73:fb:31:fc:27:2a:43:99:d2:e4:bd:
f0:70:f2:56:ae:05:50:68:3f:20:b2:c7:1e:8d:45:e2:8b:55:
0e:6c:30:c1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPzt0aapV0fbHWCVpolUolGtEj20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG
RTM0RkExMjAeFw0yNTExMDUwNTU3MjZaFw0yNjExMDQwNjAyMjZaMDMxMTAvBgNV
BAMTKDg4MDlGOUMzMzRCNDMyRDFDMzlCMUM0OEE4MUVEQzJCRjUxNzkyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXTRz4GJBHgHWrUtPq00MB7Rl
IBXCbyOHmetYK5LlOE9bPpRBWN3d1R/6CBoBBhp/CsA+dbtULDWTEe+cm/R/8NIT
qhrtvfRoE9ZQEsl6aYB50UXI39GcEFApMsM6GyDqvxmmvMOl7oxeg4Zddj+lD9CV
PFgUO5wwCDYNmTTWDVUMa6q6eKzcYlHjLNq4wW+aB7cVlKETAt3f/2qWWScRYzeO
g1+9hnG70oBhY/2/Z678kehMzVCyGpO4DgrrlQPo79Il8+mxRizxIE4X4jX/323v
UPqeNaf3jnHSM6yqyEnQzOib7VkwOzbalwv0gK3cFqv55hyqvnTkuWIjmExNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUiAn5wzS0MtHDmxxIqB7cK/UXkncwHwYDVR0j
BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE
MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0
RkExMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzNzc0NjFkLWZlNGYtNDk2MS05
MmU1LTk2NTVhZjI1NzU0YS8wLzMxMzAzMzJlMzEzMjMxMmUzOTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3lgMA0GCSqG
SIb3DQEBCwUAA4IBAQC5ZkcLmw8jRx2I7vsY+8k/vJSmgYJp0uofJeAAXXpikB7/
EY3Ay9lEzQukec+0judQ+lHcQuEzTwqJJmyacOJt1+Ywjd4vqYl1uZbzROmz2M+j
0IDaRO0ivp224Bcckxf8blisfVlDBMtl+R3uee4iZxEBThAffi3QSgd47ZX1/GIe
YC0bXdyfOJJhHSMMeHlhEo7ksYq2do9frDO7H578ZBLm0tb6ej2kU3jMm1Kebcp4
Y9Iv9n2cbCCmZEydGMx8p+zoP8a3TZ8CIvo5IwNp0wQlXLgC4uRVBpYN9X5Jc/sx
/CcqQ5nS5L3wcPJWrgVQaD8gsscejUXii1UObDDB
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:56 2025 by rpki-client